Security Advisory

CVE-2011-4777

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2011-12-16 11:00:00
Last updated 2024-09-16 20:51:40
Assigner mitre
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Panel 10.4.4_build20111103.18 allows remote attackers to inject arbitrary web script or HTML via the login parameter to preferences.html.